Introduction

Xelleration LLC has over 15 years of IT, workflow, and business process automation with clients including Fortune 500 to midsize businesses.  Our SOX practice has developed a comprehensive enterprise risk practice methodology, tools and techniques, and training programs to deliver risk advisory services.
Xelleration LLC has experienced SOX professionals who have extensive IT experience on:

• IT and business process re-engineering
• Information  system change management
• IT General Controls
• Application Controls on some selected technologies mainly on Microsoft and Java platforms

J-SOX Core Competence

Our team works under the overall leadership of Dilshad Khaleeque, CPA, CISA, CISSP, CFE and has the capability to interact with a wider audience including client’s financial reporting, internal audit, external audit, system security and IT Governance groups to:

• Review current policies, procedures, standards and guideline
• Based on the above, propose changes in internal control make them consistent with Corporate IT Governance
• Critical review and changes in IT processes to ensure preventive, detective, corrective and recovery controls as appropriate
• Review of  Line of Business (LOB) business processes, policies and procedures  to identify evaluate IT processes  for effective internal control
• Support systems monitoring and harness it for detective and corrective and recovery controls regime
• Help the clients to implement enterprise architecture and service oriented architecture for sustainable technology infrastructure with positive Return on Investment (ROI)

Repository of Policy Documentation

Our team of developers has expertise in Microsoft SharePoint and .Net development to create a repository of IT policies, procedures, standards and guidelines complete with relevant workflow for adding, editing and deleting the document following the client’s review and approval process, appropriate security for rendering the updated and current documents to the users in IT and LOB. In addition, user friendly interface and contents, we also provide extensive help documentation, discussion database and specimen forms for easy access and routing of questions and answers for effective utilization.
We have earlier developed a product for Management Agility, California, for documentation of policies using RoboInfo and deployed the solution to several clients.

Project Initiation and Planning

• Assist  the client in establishing a local Project Management Office (PMO) for its internal control study and documentation initiative
• Provide training and education regarding J-SOX in an effort to leverage the client’s personnel
• Assist the clients in developing and implementing project progress and communication protocols designed to promote effective project tracking
• Assist the client’s IT management with aligning the company’s internal control study with existing quality improvement and business process improvement initiatives in an effort to leverage internal subject matter experts and to use existing process knowledge and documentation

Documentation of Internal Control

• Assist the client with its development and documentation of control objectives
• Assist the client with facilitated workshops, surveys and interviews with process owners to understand and document the existing business processes, associated risks and controls
• Assist the client with its deployment of a customized database or spreadsheet that serves as a repository for the documentation of key business processes, potential control deficiencies, management’s prioritization, and follow-up action plans.

Assessment of Internal Control

• Assist the client with its design of the initial assessment of control effectiveness
• Assist the client with testing controls in an effort to validate the identification of the potential control deficiencies as compared to the internal control framework
• Assist the client with the implementation and selection of additional processes or controls in an effort to facilitate a reduction or elimination of control deficiencies

Internal Control Testing and Remediation

• Assist the client with developing J-SOX test plans
• Perform a dry run of the internal audit for the clients for control testing (offered by Spry Associates, CPA firm)
• Perform the internal audit for IT control effectiveness (offered by Spry Associates, CPA firm)
• Assist the client with internal control testing and remediation of identified deficiencies (offered by Spry Associates, CPA firm)

Contact Us

For further details or questions on the above, please contact Dilshad Khaleeque
at 949-417-2024 x124 or dkhaleeque@xelleration.com.